Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,802)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-1185 4Canonical DebianImagemagick+1 more 4Debian Linux ImagemagickOpensuse+1 more Apr 29, 2026 Jun 5, 2012 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via...Show more Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.Show less
CVE-2012-0044 2Canonical Linux 2Linux Kernel Ubuntu Linux Apr 29, 2026 May 17, 2012 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a deni...Show more Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call.Show less
CVE-2012-0038 1Linux 1Linux Kernel Apr 29, 2026 May 17, 2012 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-bas...Show more Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow.Show less
CVE-2011-4097 2Linux Redhat 2Enterprise Linux Linux Kernel Apr 29, 2026 May 17, 2012 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a ce...Show more Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory.Show less
CVE-2011-3065 1Google 1Chrome Apr 29, 2026 Mar 30, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2011-3045 6Debian FedoraprojectGoogle+3 more 13Chrome Debian LinuxEnterprise Linux+10 more Apr 29, 2026 Mar 22, 2012 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (appl...Show more Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.Show less
CVE-2011-3026 4Apple GoogleOpensuse+1 more 7Chrome Iphone OsLinux Enterprise Server+4 more Apr 29, 2026 Feb 16, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncati...Show more Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.Show less
CVE-2011-3015 1Google 1Chrome Apr 29, 2026 Feb 16, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-4374 1Adobe 2Acrobat Reader Apr 29, 2026 Jan 19, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2013 1Microsoft 3Windows 7 Windows Server 2008Windows Vista Apr 29, 2026 Nov 8, 2011 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of...Show more Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."Show less
CVE-2011-2829 1Google 1Chrome Apr 29, 2026 Aug 29, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays.
CVE-2011-0211 1Apple 2Mac Os X Quicktime Apr 29, 2026 Jun 24, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVE-2011-0209 1Apple 2Mac Os X Quicktime Apr 29, 2026 Jun 24, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.
CVE-2011-1823 1Google 1Android Apr 21, 2026 Jun 9, 2011 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative in...Show more The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.Show less
CVE-2011-1178 1Gimp 1Gimp Apr 29, 2026 Jun 6, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or poss...Show more Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.Show less
CVE-2011-1800 1Google 1Chrome Apr 29, 2026 May 16, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unkn...Show more Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-1745 2Linux Redhat 7Enterprise Linux Enterprise Linux AusEnterprise Linux Desktop+4 more Apr 29, 2026 May 9, 2011 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted...Show more Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.Show less
CVE-2011-1437 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float rendering.
CVE-2011-1593 3Canonical LinuxRedhat 8Enterprise Linux Enterprise Linux AusEnterprise Linux Desktop+5 more Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system ca...Show more Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.Show less
CVE-2011-0663 1Microsoft 2Jscript Vbscript Apr 29, 2026 Apr 13, 2011 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Re...Show more Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."Show less

Previous 1...186187188...191 Next